Enable anonymous auth for Grafana iframe embeds

Public dashboards don't support template variables or PostgreSQL
datasources, so anonymous auth is required for Homepage embeds.

Security relies on Tailscale ACLs - see zk grafana card.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Erich Blume 2026-01-30 14:11:29 -08:00
commit 0c09177d08

View file

@ -30,10 +30,12 @@ grafana.ini:
allow_embedding: true
# Required for iframe session cookies
cookie_samesite: lax
# Public dashboards - selectively share specific dashboards without auth
# Enable per-dashboard via Share > Public Dashboard in Grafana UI
public_dashboards:
auth.anonymous:
# WARNING: All dashboards readable without login
# Security relies on Tailscale ACLs - only tailnet members can reach Grafana
# Required for iframe embeds with template variables and non-Prometheus datasources
enabled: true
org_role: Viewer
analytics:
check_for_updates: false
reporting_enabled: false